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ABSTRACT 



Apostag e meter machine with a chip card write/read unit has 
a controiier which, in conjunction witn suitably initialize d 
cEip cards, allows the function input and the administr ation 
01 cost center to be handled to be simplitied. For~denving 
chip cards that individually allow only a hmited function to 
be implemented, i.e. the cards are of a limited function 
scope, a table with a specific hierarchic structure can be 
produced using the keyboard and display and with the 
assistance of the microprocessor and the appertaining non- 
volatile memories within the postage meter machine, so that 
a pre-stored structure is correspondingly modified by the 
user. A tree structure in the hierarchy thereby arises for 
second chip cards and further successor cards derived from 
the specific application function cards that allow access to 
the table with their chip card number internally stored in the 
chip card. The function allocation applications to the chip 
card number can be arbitrarily selectably stored in non- 
volatile memory areas by the authorized user 

16 Claims, 5 Drawing Sheets 
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POSTAGE METER MACHINE WITH A CHIP 
CARD WRITE/READ UNIT AND METHOD 
FOR OPERATING SAME 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention is directed to a postage meter 
machine with a chip card write/read unit, of the type wherein 
a microprocessor controls a printing procedure dependent on 
a chip card which is currently inserted in the write/read uoit. 
The present invention is also directed to a method for 
operating such a postage meter machine. 

2. Description of the Prior Art 

It is known to keep track of accounting-specific data about 
cost centers in postage meter machines. The purpose of the 
cost center concept is to introduce transparency into the 
accoimting of devices that are used by different users. The 
ternl "cost center" means a non-volatile memory area pro- 
vided for department-by-department accounting or booking 
of usage activity. Each cost center has a number and/or name 
allocated to it via which the aforementioned memory area is 
selected. The business entity associated with a cost center is 
ultimately responsible for the cost (charge) for postage or 
shipping fees incurred by personnel who use the postage 
meter machine who arc employed by the business entity. 

Modern postage meter machines such as, for example, the 
thermal transfer postage meter machine disclosed by U.S. 
Pat. No, 4,746,234 utiUze fully electronic digital printer 
devices. It is thus fundamentally possible to print arbitrary 
texts and special characters in the postage stamp printing 
area and to print an arbitrary advertising slogan or one 
allocated to a cost center. For example, the postage meter 
machine TIOOO of Francotyp-Postalia AG & Co. (Postalia, 
Inc. in the United States) has a microprocessor that is 
surrounded by a secured housing having an opening for the 
delivery of a letter. Given delivery of a letter, a mechanical 
letter sensor (micro switch) communicates a print request 
signal to the microprocessor. The franking imprint contains 
a previously entered and stored postal information for dis- 
patching the letter. 

It is also known to store data specific to cost centers on 
chip cards in order to make the user-specific information 
mobile (portable) and to avoid an intentional misuse of other 
cost centers, U.S. Pat. No. 5,490,077 discloses a data entry 
with chip cards for the aforementioned thermal transfer 
postage meter machine. One of the chip cards loads new data 
into the postage meter machine, and a set of further chip 
cards allows a setting of correspondingly stored data to be 
undertaken by plugging in a chip card. Loading data and 
setting the postage meter machine are thus possible in an 
easier and faster manner than via a keyboard input. The 
keyboard of the postage meter machine remains small and 
surveyable because no additional keys are required in order 
to load or set additional functions. A plug-in slot of a chip 
card write/read unit, in which the respective cmv card is~to 
be plugged by the c ustomer within a time window, is locat ed 
o n'THTtCTCk side ot the postage meter machine. DueJ LoJbe 
l ack of direct visual contact, an unpracticcd user often do^ s 
not always succeed in inserting the required chip cards in 
immediate succession, which then leads to unwanted delays . 
The plugTin slot of a chip card write/rea d unit is only easil y 
accessiDie when" the uaet beilds over tne macfame. The 
problfims 1ft prDdUCiflg"VlaUiil ~contaci: increase grven larger 
machines. Ihe user otten has a number of other ^hip card s 
that can be plugged in. One chip card type (size forma t^y^ r 
example telephone cards, credit cards and the like, can be 
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physic ally inserted into the postage meter machine but 
i Kyr5e"acc6piea. vVithout visual contact, however, the err or 
i Tjiot alwavs_Jmmediate]v obvious. T he postage meter 
n^chine only works with relatively expensive chip cards 

5 that are themselves equipped with a microprocessor (smart 
card) and are thus able to check whether the postage meter 
machine communicates a valid data word to the chip card 
before an answer is sent to the postage meter machine. 
When, however, no answer or user identification ensues, this 
is registered as an error in the postage meter machine and is 
displayed before a request to remove the chip card is 
displayed in the display. To register an erroneously inserted 
telephone card as Attempted fraud, however, would not be 
reasonable given the not unlikely occurrence of an "inno- 
cent" mistake. 

German OS 196 05 015 discloses an embodiment for a 
printer device (JetMail®) that, given a non- horizontal, 
approximately vertical letter transport, implements a frank- 
ing imprint with an Inkjet print head stationarily arranged in 

2Q a recess behind a guide plate. For recognizing the start 
(leading edge) of a letter, a print sensor is arranged shortly 
before the recess for the ink jet print head and collaborates 
with an incremental sensor. The letter transport is free of 
sUppage due to pressure elerhents arranged on the conveyor 

25 belt, and the incremental sensor signal derived during the 
transport has a positive influence on the quality of the print 
image. Given such a postage meter machine exhibiting 
larger dimensions, however, a chip card write/read unit 
would have to be arranged and operated such that sequen- 

3Q tially pluggable chip cards can be unproblematicaUy used. 
The chip cards are usually initialized by the chip card 
manufacturer and the postage meter machine manufacturer. 
It is somewhat compUcated, however, for the postage meter 
machine manufacturer to take specific customer wishes into 

35 consideration. There is the necessity for the user of the 
postage meter machine to inform the manufacturer of his 
customer wishes that relate to a specific input function by 
chip card. Until the user has been sent an correspondingly 
initialized chip card, the postage meter machine can con- 

40 tinue to be set for the specific input function only via the 
postage meter machine keyboard. 

As an alternate wav for solving the further problem th at 
there is only limited memory capacity available on a chip 
card, U.S. Pat. No. 4,802,218 discloses that a number of chip 

45 cards be simultaneously employed, these being plugged into 
a number of write/read units. In addition to a user chip card 
for the re crediting and debiting, whereby the postage fee 
value is subtracted fi"om the credit, a master card and a 
fmrther rate chip card with a stored postage fee table are 

50 simultaneously plugged in. By accessing a postage fee table, 
a postage fee value can be determined according to the input 
weight and shipping destination without loading an entire 
table into the machine. Since, however, a respective write/ 
read unit is required for every chip card, the apparatus 

55 becomes too large and expensive. Moreover, a separate 
reloading terminal is required in order to replenish the credit 
in the user chip card, with the master card providing the 
authorization for this reloading function. A supervisor card 
has access to all master cards. Various security levels are 

60 accessible by appertaining key codes. Such a system with a 
number of slots for chip cards is very complex overall, 

German OS 1 95 16 429 discloses a method fQ i_aii,access 
^utEorizabon ro a secur ed machine or circuit with card- like 
master elements that make cara-hke autborizatioii elements 

65 p erceptible "aS' Valid. 'SllCh ^ard-Hke-autbuu /atiPnTtemeri ts 
t hat have been vaiidaie d latei allow a tE^f^ lo ihe secured 
machine or circuit without the user having the master 
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cl ement in his or her possession. Furth er authorizatio n 
elements also can be contirmed as vali3""The authorization 
procedure i ncludes ap information e xctiange 'Hetween a 
higher-ranki ng master element and a lower- ranking autb o- 
nVflrlfSVI eJemftnj nr master element and an ftct rnn i r. 1 nc V nf_ 
the Secured ma chine or circuit, jspeciiic customer wishe s, 
however, can not be taken into con sideration beca useal l 
c ards generated in this^way are technolo^calw ang^ Timc- 
tidnally identicaJ and merely s e rve the purpose oTBisniFu t- 
irig ac^eaa t tlitnonzations oi: aTSerarchicallv^ordered adm in- 

ktfaiinn nr ihe s^ciireH prtarhme nr rinnTrir 

SUMMARY OF THE INVENTION 
An object of the present invention is to provide a postage 
meter machine with only one easily accessible chip card 
write/read unit and with an appertaining controller of the 
postage meter machine, with a set of chip cards available to 
the user, this card set as desired, controlling the access to 
preselectable postage meter machine fimctions wich are 
combined to form an overall operation of the postage 
machine dependent on which chip cards are employed. The 
postage meter machine should be operated with an optimally 
inexpensive chip card type. The advantages o^ 
imambiguous, simple and fraud-resistant cost center selec- 
tion by chip card should be achieved while avoiding the use 
of substantial memory capacity. In addition to enabling the 
cost center, an enabling of predetermined, further functions 
should be achieved merely by plugging a chip card into a 
chip card write/read unit. The chip card/postage meter 
machine system should be arbitrarily expandable, or user- 
modifiable. A different inserted chip card type should be 
recognized by the postage meter machine and correspond- 
inglv intei 
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The above object is achieved in accordance with the 
/ principles of the present invention in a postage meter 35 display, and with the assistance of the microprocessor and 



Thus, memory cards are usually implemented with a few 
hundred bits of memory size. This memory capacity is 
insufficient for accepting the full scope of cost center- 
specific data. 

The entire cost center handling within the postage meter 
machine is inventively controlled by means of a consecutive 
number in every chip card that is employed in combinatioo 
with the postage meter machine. A first application program 
that allocates specific privileges (hierarchies), security mea- 
sures and cost center numbers to specific chip card numbers 
is stored within the program memory of the postage meter 
machine. A first chip card supplied together with the postage 
meter machine is referred to as a master card. This is 
uniquely personalized for the postage meter machine by the 
manufacturer in order to place it in operation. Further chip 
cards provided together with the postage meter machine are 
referred to below as successor cards. The chip card number 
of the successor cards is stiU incomplete before their ini- 
tialization. Initialization of these successor cards can be 
implemented by the user with the postage meter machine. 
"Initialization" means the completion of a chip card number, 
the writing of a part of an identifier string in a memory of the 
chip card, and the allocation and storing of the allocation of 
the chip card number to a number of application functions or 
to at least one apphcation function in a non-volatile memory 
of the postage meter machine. Each application function has 
a program associated therewith stored in the program 
memory of the postage meter machine. When a chip card 
with a chip card number is inserted in the write/read unit, the 
program for the application function identified by the chip 
card number of the inserted chip card is automatically called, 
and that program is executed. For deriving chip cards that 
enable a limited function scope, a table with a specific 
hierarchic structure is produced using the keyboard and 



machine, and a method for operating a postage meter 
machine, wherein a printer prints an imprint on a print- 
receiving medium as part of a printing procedure, which 
results in the printing of the imprint, under the control of a 
control system. The control system includes 
microprocessor, a non-volatile memory having a number of 
non- volatile memory areas, and a user interface. A chip card 
write/read unit is coEmected to the microprocessor, and a 
number of chip cards are individually insert able into the chip 
card write/read unit. Each of the chip cards has a chip card 
number. The user interface allows a user to store a number 
of limited apphcation functions, associated with the printing 
procedure, in the non-voladle memory areas in a list wherein 
the Umited application functions arc respectively allocated 
to the chip card numbers of the chip cards. The respective 
allocation of the chip card numbers to the limited application 
functions in the non-volatile memory areas is arbitrarily 
selectable by the user via the user interface. A program 
memory is provided in the postage meter machine which is 
[accessible by the microprocessor. The program memory 
\ contains a number of programs respectively allocated to the 
(limited application functions stored in the list. Upon inser- 
^on of one of the chip cards into the chip card write/read 
pit, the microprocessor loads only the chip card number of 
inserted chip card, and calls, from the non-volatile 
mdmory areas, the limited function application allocated to 
theVhip card number of the inserted chip card. The micro- 
processor then executes the program stored in the program 
memory which is allocated to the called limited application 
function. 

Often, chip cards have only a very limited memory 
capacity. This is especially true of inexpensive chip cards. 
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the appertaining non-volatile memory, within the postage 
meter machine, so as to modify the pre-stored structure. The 
table is non-volatilely stored in the non-volatile memory of 
the postage meter machine. A tree structure thereby arises i n 
the hierarchy for the second chip card derived from t he 
inventive tirst c hi p card aiii3~fo r"tur ther suc cessor cards, 
p articularly specific fimction or function apphcation ca rds. 
A t least a portion of the table ,^asJtJs^eiierated, can be 
di splayed to allow verificat ion-bv the .use r^before it is s tored 
in the non-volatile memory. 

me aiorementioned modifiable structure is divided into a 
Ust of valid card numbens, linkage conditions and appertain- 
ing parameter sets and is non-volatilely stored in corre- 
sponding memory areas of the non-volatile memory of the 
postage meter machine. A control device of the postage 
meter machine that contains the non-volatile memory with 
memory areas for an allocation of listed application func- 
tions to a chip card is connected to the chip card write/read 
unit. The internal postage meter machine initialization 
allows an inexpensive set of chip cards to be used, that are 
only partially pre-initialized at the manufacturer side. An 
initiaHzed chip card must contain at least a chip card number 
that is read out via the chip card write/read unit or is 
completed and stored upon initialization. The desired chip 
card number can be stored or modified in a thkd part of an 
identifier string in the memory areas of the chip card by an 
authorized user with the chip card write/re aid unit The 
microprocessor of the control device of the postage meter 
machine is programmed to load the chip card number stored 
in the inserted chip card, to call the apphcation function or 
functions allocated in the list to the respective chip card 
number (stored in one of the memory areas of the non- 



03/17/2004, EAST Version: 1.4.1 



us 6,418,422 Bl 
5 6 

volatile memory of the postage meter machine) and to alized master card. The second chip cards referenced 51 in 

implement the corresponding application program or pro- the group are at the first hierarchy level, the further chip 

grams stored in the program memory. The allocation in the cards referenced 52 in the group are at the second hierarchy 

aforementioQed memory areas can be arbitrarily selected level, the following chip cards referenced 53 in the group are 

and stored by the authorized user. 5 at the third hierarchy level, etc. The cards from these groups 

^ . , , , 1 . . t- . J L of chip cards for which the function application authoriza- 

Tlie divided, modifiable structure can be restored by ^ion is stored level-by-level limited in selectable fashion and 

electronic pointers m order to undertake a corresponding tubularly are also referred to as successor cards. The first 

data entry mto the mam memory, whereby the microproces- ^^^^ ^^^^^^ ^^^^ (hierarchy 0) with which all 

sor of the postage meter machine implements a correspond- initiahzations and modifications can be undertaken. For 

ing function or a stored sequence of functions according to lo example, the group can include another five cards with the 

the application program. One of the functions can be imple- consecutive numbers 002 through 006, respectively for four 

mented in order to at least partially display the structure in of the cost centers. The second card 51 is authorized for the 

a table or in order to be able to modify the structure. access to the cost centers 1 through 4 as group card GC 1-4 

(hierarchy 1). The further successor cards 52 arc rcspec- 

DESCRIPTION OF THE DRAWINGS is tively authorized for only a single cost center as individual 

FIG. la schematically illustrates the layout of the memory card EC 1, EC 3, EC 4 (hierarchy 2). The second card 51 can 

areas of a chip card used in accordance with the invention. allow modificaUons in the successor c^rds 52, i.e. m the 

, . .„ , r , . . 1 r mdividual cards EC 1, EC 3, EC 4, in the scope of its own 

FIG, lb illustrates the tree structure of the hierarchy for authorization. The modification of the cost center, namely 

the fimction application cards denved from the master chip KST number 1, 3 and 4, that is undertaken relates to a 

card in accordance with the invention. change in the allocation of application functions. Such a 

FIG. 2 is a block circuit diagram for setting the functions modification can be undertaken (top down) with the assis- 

in a postage meter machine constructed and operating in tance of the group card (51) GC 1-4 but not (bottom up) for 

accordance with the invention. the first card 50 MC. The franked postage value can be 

HG. 3 is a perspective view of the inventive postage 25 booked onto one of the cost centers, namely the co 

meter machine from behind. } ^> r'^H ^ ? u 

individual function card FC 2 mitiahzed internally in the 

FIG. 4 is a flowchart for control by the microprocessor in p^^j^g^ j^^jer machine with the group card GC 1-A then 

the data entry procedure using a chip card in accordance ^^jy ^^^^ possessor to undertake an informational 

with the invention. inquiry of the bookings under the cost center number 2 and 

FIG. 5a illustrates a division of the structure among a only zero-value frankings with the postage meter machine, 

number of memory areas, in accordance with the invention. Without generating a group card, it is also provided in a 

FIG. Sb is a flowchart for control by the microprocessor second branch to generate an individual card EC 5 and a 

when callmg at least one of the functions according to the function card FC 5, both of which are allocated to the fifth 

stored structure by entering a chip card number in accor- cost center. An individual function card FC 5, initialized 

dance with the invention. internally in the postage meter machine with the individual 

card EC 5, only allows its possessor, for example, to 

DESCRIPTION OF THE PREFERRED ^^ertake an mformational inquiry of the bookings under 

EMBODIMENTS center number 5 and zero-value frankings with the 

JIG, la shows a chip card with contact field. As is known , ^ postage meter machine, 

the memory chip is located under this field, the memory Without further hierarchy levels, only a successor card FC 

' ar6as thereot being dividea'mto u n protH;tell" anan p^ 9 aUocated to a lowest hierarchy level can be internally 

areas. Although other data gen erated either by the pos tage initiaHzed in the postage meter machine. The cards of the 

meter machine or by the manutacturer can be contained in lowest hierarchy level are the most limited in function 

these areas, for practicing the invention it is only necessary 45 application scope. 

t hat an identifier string be stored in the protected ar^ „ Without omitting hierarchy levels, a number of successor 

Hie protected area can be generated in various ways. A cards allocated to each hierarchy level can likewise be 

first part of the identifier string can only be written by the . internally initialized level-by-level in the postage meter 

chip manufacturer. A second part of the identifier string can machine in a third branch, i.e. a group card GC 6-8 as 

only be written by the postage meter machine manufacturer. 50 successor card 51 in the first hierarchy level, an individual 

A protected data area in the third part of the identifier string card EC 8 as successor card 52 in the second hierarchy level 

is provided for the customer. The user accesses this area and a function card FC 8 as successor card 53 in the third 

according to a predetermined, preferably menu-controlled hierarchy level. 

input via the postage meter machine keyboard. Such access The protection of the cards against readout of the con- 
is permitted only for an authorized user, for example a user 55 secutive number is possible in a known way by PIN or other 
who has, and has previously inserted, a chip card having a security algorithms. Given loss of the master card, a replace- 
higher rank in the hierarchy than the chip card currently ment is only possible from the postage meter machine 
inserted, which is to be initialized. manufacturer (and corresponding documentation of the 
A hierarchic structure that — as shown in FIG. lb — can be authenticity). The inhibiting or enabling of all other cards is 
arbitrarily expanded and modified by the postage meter 60 possible with the master card. A further security measure in 
machine user proceeding from a first chip card, is produced the internal postage meter machine initialization of the 
for a group of chip cards by the internal postage meter system with the assistance of the master card is achieved 
machine initialization with of an allocation to application because only physically present cards can be initialized; as 
functions in the postage meter machine and with a user- a result, the secret, consecutive numbers of the cards are 
authorized writing (entry) in the third part of the identifier 65 protected. An inhibiting of the corresponding memory area 
string in the memory chip of the chip card. The first chip of the postage meter machine can ensue when a successor 
card 50 is at the highest hierarchy level and is the person- card is lost. 
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FIG. 2 shows a block circuit diagram for setting the motor 15, another is the entrained tension roller 11'. The 

function of the postage meter machine and for driving the drive roller 11 is preferably a toothed roller; accordingly, the 

printer 20 with a chip card write/read unit 70 and with a conveyor belt 10 is a toothed belt, assuring a positive force 

control system 1 of the postage meter machine. The control transmission. An encoder is coupled to one of the rollers 11, 
means 1 forms the actual meter and includes a first control 5 11'. The drive roller 11 together with an incremental sensor 

device 90, a keyboard 88 and a display unit 89 as well as a 5 is preferably firmly seated on a shaft. The incremental 

first and a second application-specific circuits (ASIC) 87 and sensor 5 is implemented, for example, as a slotted disk that 

97. The first control device 90 contains a first microproces- interacts with the sensor 6, as a light barrier, thereby forming 

sor 91 and known memories 92, 93, 94 as well as a the encoder. 

clock/date circuit 95. Areas for storing accounting data that lO The individual print elements of the print head 4 are 

are allocated to the cost centers are provided in the non- connected within its housing to print head electronics, and 

volatile memory 94. the print head can be driven for a purely electronic printing. 

Together with a second microprocessor 85 and a non- The print control ensues on the basis of the path control, with 

volatile memory 84, the first ASIC 87 forms a postal security the selected stamp oflket being taken into consideration, this 
module PSM 86. The postal security module PSM 86 is 15 being entered by keyboard 88 or, as needed, by a chip card 

enclosed in a physically secured housing and has a fast serial and being non-volatilely stored in the memory NVM 94. A 

interface to the printer control 16. A hardware-based debit- planned imprint thus derives from the stamp offset (without 

ing in the first ASIC 87 ensues before every franking printing), the franking imprint image and, possibly, further 

imprint. The debiting ensues independently of cost centers. print images for advertising slogan, dispatching information 
The second microprocessor 85 contains an integrated read- 20 (selective imprints) and additional, editable messages, 

only memory int.ROM (not shown) with the specific appii- p[G 3 shows a perspective view of the postage meter 

cation program that is approved for the postage meter machine from behind. The postage meter machine is 

machine by the postal authority, or the respective mail equipped with a chip card write/read unit 70 that is arranged 

carrier. The postal security module PSM 86 can be imple- behind the guide plate 2 and is accessible from the upper 
mented as disclosed in greater detail in European Applica- 25 jjQUsing edge 22. After the postage meter machine is turned 

tion 789 333. on with the switch 71, a chip card 50 is plugged from top to 

Both ASICs 87 and 97 are connected via the parallel /iC bottom into the insertion slot 72 and can be programmed by 

bus to at least the control device 90 and the display unit 89. the user for specific applications. Within the limits pre- 

The first microprocessor 91 preferably has terminals for the scribed by the manufacturers, this ensues with the user 

keyboard 88, a serial interface SI-1 for the connection of the interface 88, 89 of the control system 1 of the meter. The 

chip card write/read unit 70 and a serial interface SI-2 for the successor cards arc configured by the user for predetermined 

optional connection of a modem. The credit stored in the function applications for the respective postage meter 

non-volatile memory 84 of the postal security module PSM machine. The peripheral devices of the postage meter 

86 can be increased with the modem. machine can be electrically connected to the interfaces 98 

The second ASIC 97 has a serial interface circuit 98 to a and 99 and thus can be driven by the meter according to the 

preceding device 13 in the mail stream, a serial interface chip card input. A letter 3 supplied standing on edge that has 

circuit 96 to the printer device 20 and a serial interface its surface to be printed lying against the guide plate is then 

circuit 99 to a device 18 following the printer device 20 in printed with a franking stamp 31 according to the input data, 

the mail stream. The letter delivery opening is lateraDy limited by a trans- 

Asuitable peripheral device embodying such interfaces is parent plate 21 and the guide plate 2. 

described in German Application 197 11 997.2 (as yet A predetermined cost center is set with the insertion of a 

unpublished), conesponding to pending U.S. application first chip card 50 that was supplied together v^ath the postage 

Ser. No. 09/041,469 filed Mar. 12, 1998 (''Arrangement for meter machine. For example, the cost center 1 is pre-set, the 

Communication Between Stations of a Mail Processing accounting ensuing with respect thereto in order to gain 

Machine," Kunde et al.) assigned to the same assignee as the access to other cost centers when no other predetermined 

present application. mputs are actuated by keyboard. 

The interface circuit 96 coupled with the interface circuit The postage meter machine contains a corresponding 

14 located in the machine base produces at least one application program in its program memory 92, so that a first 
connection to the sensors 6, 7, 17 and to the actuators, for 5Q chip card 50 plugged into the chip card write/read unit 70 

example to the drive motor 15 for the drum 11 and to a allows a setting of the postage meter machine for at least one 

cleaning and sealing station RDS for the Inkjet print head function application on the highest hierarchy level. 

4, as well as to the ink jet print head 4 of the machine base. Jn accordance with the invention the c ontrol system 1 ha s 

Further details of the interaction between the print head 4 a control device 90 equipped wit h a microprocessor 91 wit h 
and the cleaning and scaling station RDS are disclosed in 55 app ertaining memones 9Z, 93, 94, 95 and a connected us er 

German Application 197 26 642.8 (not yet published, cor- int erface 88, 89 that, dep endent on a predetermmed inpu t, 

responding to pending U.S. application Ser. No. 09/099,473, allows the usc^ to unde rtake an internal postage imete r 

filed Jun. 18, 1998 ("Device for Positioning an Ink Jet Print mac hine mitiali zation of irrieast one cfii p card from, a 

Head and a Cleaning and Sealing Device," von Inten et al.) n umHer of fiinher cnip"^ard5^l7"52, 53 subsequentl y 
assigned to the same assignee as the present application. eo inserted into the plug-in slot 72, with the microprocesso r 91 

One of the sensors 7, 17 arranged in the guide plate 2 is ot ttie posta^ e_ meter machine Ji ein p pmprammed tojm ite 
the sensor 17 and serves the purpose of preparing the print data into a pS^f the identifier string of a chip card in ord gr 
initiation during letter transport. The sensor 7 serves for to at least suppiement the chip card"fiumBe r. In conjunction 
recognizing the start of the letter for the purpose of print x^tlTsuTlaElyinserted chip cards, the function input and the 
initiation during letter transport. The conveyor arrangement 65 calUng of the application function, for example the admin- 
is composed of a conveyor belt 10 and two rollers 11, 11'. istration of cost center data to be entered are simplified. Jl^e 
One of the rollers is the drive roller 11, connected to the a further chip cards 51, 52. 53 are sequentially inserted into 
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the plu g-in slot 72 of the chip card write/read un it 70 and are 
internally initialized in the postage meter machine7*with a 
table having a specific hierarchic structure being produced 
using the keyboard 88 and display 89 and with the assistance 
of the microprocessor 91 and the appertaining non-volatile 
memory within the postage meter machine. The pre-stored 
structure is correspondingly modified and stored in one of 
the appertaining non-volatile memories 94, 95 allocated to a 
respective chip card number, with the chip card number 
being stored in a segment provided therefor in an identifier 
string stored in the protected areas of the further chip cards 
51, 52, 53. An inexpensive cost-beneficial chip card having 
only a little memory capacity is referred to below as type a. 
According to ISO 7816, a memory card having 256 bytes 
such as, for example, OMC240SP of the Orga company can 
be employed. 

^ TVnotner chip card having significant memory capacity is 
referred to below as type b. For example, an I^CBus memory 
card having 32 Kbytes according to ISO 7816, particularly 
AM2C256 of the AMMI company, can be employed. This 
contains a chip Ar24C256 of the Atmel company. 

Further chip cards are referred to below as type n. For 
example, a chip card with 8 Kbytes and having a micropro- 
cessor can be employed. The further chip cards of the types 
b through n relate, for example, to the following function 
applications: 

reload possibility of the postage fee tables via an update 

chip card 49, 
slogan reloading via chip cards (daily stamp), 
chip cards with limited function application, 
chip cards with PIN authorization of functions, 
chip cards for setting peripheral device function, 
chip cards for setting system configuration, 
chip cards for the activation of programmed print formats. 
FIG. 4 shows a flowchart for control by the microproces- 
sor of the postage meter machine in the data input with a 
chip card. 

Aft er a power supply (not shown) of the postage meter 
mdcmne is turned on with lhe switch 71, which is "reg istered 
1)y tfte mi croprocessor VI ot the postage meter rnacHiHe in 
t he step mu, a microprocessor 75 connected to a contact ing 
arrangement 74 of the chip card write/read unit 70 signa ls 
the microprocessor 91 of the postage meter ma c hine when a 
chi p card is inserted into the plug-in slot 727 wKiclT is 
r egistered by the microprocessor 91 of the p ostage me ter 
machine in the step lUl. A communication accordmg to a 
pr edetermined protocol between the chip card write/r ead 
u ml 7U and the chip card and an evaiuaho n in step 102 th en 
eiisues as to deter mi ne whetljeTThe chip card is readable a s 
t yp_e a. When this is tne casc,^a branch is made from the 
inquiry step 103 to a step 111 in order to load a part I of the 
identifier string into the non-volatile memory 94 of the 
postage meter machine, with an evaluation of the company 
identification number (company ID) being undertaken by the 
microprocessor 91 of the postage meter machine. If, 
however, the chip card is not readable as type a, a branch is 
made from the inquiry step 103 to a step 104 in order to 
undertake a communication according to a second predeter- 
mined protocol and an evaluation in step 104 as to whether 
the chip card is readable as type b. When the chip card is 
readable as type b, a branch is made from the inquiry step 
105 to a step 106 for further data processing with the 
microprocessor 91 of the postage meter machine. In a 
comparable way as warranted, further protocols are 
executed (steps 107, not shown in detail) to determine in the 
inquiry step 108 whether th e chip card is readable as type n, 



8,422 Bl 

10 

in order to then branch to a corresponding step 109 for 
further data processing by the microprocessor 91 of the 
postage meter machine. Otherwise, when the type of the 
chip card is not recognized, a branch back to the step 101 

5 ensues af ^er an error message in the step 110. 
^r-UiSering from U.S. Pat. No. 5,490;077,"waefein-the— 
sequence is fixed .and a chip card A for loading postage fee 
tables must be plugged in before a chip card B that, for 
example, sets a cost center, the inventive sequence for the 

10 sequential plugging of a series of chips cards internally 
initialized in the postage meter machine is arbitrary. 
Additionally, the type of chip card can be distinguished 
according to the inventive flowchart according to FIG. 4. 
Advantageously, a suitable chip card type corresponding to 

15 the type of application is selected. 

A q expensive type of chip card only h as t o be employe d 
in the special instances w here there is no axternahve^ 

There is no master card in U . ::>rPB7 Nor5r4907Q77^i^e jhe 
chip cards are all techno iogicaiiy and ninc uonaily identica l. 

20 An allocation oi the nve-piace cost center number J<Ls'i-ino. 
to the function scope of the postage meter machine is only 
possible for the manufacturer. Differing therefrom, it is now 
invendvely also possible for the user to store a free alloca- 
tion of three places of the five-place KST number for at least 

25 one of the application functions internally in the postage 
meter machine. 

A time window for the insertion of every chip card is an 
invariable, fixed time period in U.S. Pat. No. 5,490,077. 
Inventively, however, no time limit is now prescribed for the 

30 first inserdon of the chip card. Advantageously, a timer value 
is loaded into an area of the non- volatile memories 94 or 95 
of the postage meter machine in a type of application 
corresponding to the identifier string of the chip cards, this 
timer value being formed by a counter that defines a time 

35 window for a succeeding action that, for example, is imple- 
mented with a successor chip card. 

When a branch is made firom the inquiry step 103 to a step 
111 in order to load a part I of the identifi.er string of the 
non -volatile memory 94 of the postage meter machine, with 

40 the microprocessor 91 of the postage meter machine under- 
taking an evaluation of the company identification number 
(company ID), a chip card of type a is utiUzed with which 
information for the further operation of the postage meter 
machine can be derived from a stored company identifier B. 

45 As warranted, the microprocessor 91 additionally checks the 
company identifier B in a known way for the presence of a 
valid company ID. Otherwise, an error message is output in 
the optional step 113. In the step 112, the company identifier 
B is stored in one of the non-volatile memory areas of the 

50 postage meter machine in order to then branch to a step 114! 
In the step 114, a part H of the identifier string is loaded 
into the non-volatile memory 94 of the postage meter 
machine, with the microprocessor 91 of the postage meter 
machine undertaking a masking of the starting identifier A 

55 for the derivation of a first identifier Al with which a 
computational operation is subsequently implemented for 
forming a second identifier A2, in order to subsequently 
check whether the first part I stemming from the identifier 
string and the identifier A2 have a predetermined relation- 

60 ship to one another. For forming a second identifier A2, a 
computational operation having the form 

>i2*v41-SRN-C (1) 

ensues with the serial number SRN of the postage meter 
65 machine and with a secret constant C. 

Using the company identifier B, the microprocessor 91 of 
the postage meter machine is to subsequently check: 
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Identifier (2). 

Evaluating Equation (2), an inhibiting of the memory area 
in the postage meter machine ensues for predetermined 
applications in the step 116 when the predetermined rela- 
tionship is lacking or — otherwise — , for example when the 
company identifier (company ID) is the same as the second 
identifier A2 that is formed, a branch is made to a step 117. 
A further masking of the identifier can now be undertaken in 
order to identify the master card. 

A check to see whether a master card is present is carried 
out in the inquiry step 118. When this is the case, a branch 
is made to a step 120 in order to load a timer value into the 
non- volatile memory 94 of the postage meter machine, 
whereby the microprocessor 91 of the postage meter 
machine — ^in the step 121 — enables the functionality that is 
provided in the program memory 92 of the postage meter 
machine for the master card. This functionality includes a 
generation of a specific functions application card with the 
postage meter machine, which is explained in greater detail 
below with reference to FIG. 5. A check is thereby carried 
out in the step 122 to determine whether the card is still 
plugged in. When this is the case, the functionality is 
enabled further. Otherwise, a timer is started in the step 123. 
For example, the timer is a backward (countdown) timer 
realized with memory cells in the volatile memory 93 or in 
one of the non-volatile memories 94, 95 of the postage meter 
machine, and the oscillator in the clock/date circuit 95 
supplies a corresponding clock signal. At the end of the 
timer, for example when the count value zero is reached, an 
interrupt is triggered for the microprocessor 91 of the 
postage meter machine. In the following step 131, further 
use of the postage meter machine for at least the one 
functionality of franking is then inhibited. 

When a determination is made in the inquiry step 118 that 
no master card is present, a branch is made to a step 119 in 
order to load the part III of the identifier string into the 
non-volatile memory 94 or 95 of the postage meter machine 
and in order to undertake an evaluation of the chip card 
number stemming therefrom. A number of different apph- 
cation functionalities is listed in the memory cells of a 
memory area of the non-volatile memory 94 or 95 of the 
postage meter machine, with a conesponding chip card 
number being allocated to every application functionality. 
When no application is stored in the list allocated to a 
specific chip card number, a branch is made from the inquiry 
step 125 to the following step 131 in order to inhibit the 
further use of the postage meter machine for at least the one 
functionality of franking. Otherwise, a timer is started in the 
step 123, and the listed functionality is enabled in the step 
127 according to the chip card number. A check is carried out 
in the step 128 to determine whether the card is still plugged. 
When this is the case, a branch back ensues and the 
functionality is enabled further. At the end of the timer, an 
interrupt is triggered for the microprocessor 91 of the 
postage meter machine and a branch is made to the follow- 
ing step 131. 

The identifier string has a key-like function. The identifier 
string is non-volatilely stored in the chip card distributed 
among a number of security areas, so that different security 
demands must be met for the modification of the part of the 
identifier string stored in the respective security area. Since 
the manufacturer has written the first and second parts of the 
identifier string, a user of the postage meter machine can 
write the third part of the identifier string with a chip card 
number. The microprocessor 91 is programmed to modify a 
chip card number stored in the chip card and to store an 
allocation of the chip card number to listed application 
functions in the non-volatile memory of the postage meter 
machine. 
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The microprocessor 91 of the r^ntml dKvicg 9^ i^ 
programmed — in comb ination with chip cards suitably ini- 
tialized for the respective application purpose — to Simplify 
t EetuncliOn iHplH anfl an application function , tor example 

5 [he adm inistration ot cost center data to De regis leredTThe 
function input ensues indirectly via the chip card number in 
order to call at least one of the allocated application func- 
tions. The selection among the possible application func- 
tions ensues with the postage meter machine keyboard. The 

10 function input includes the calling of an application function 
for top down initialization of further chip cards. "Top down 
initialization" means the derivation of chip card numbers 
and their allocation in the postage meter machine to a limited 
number of application functions, or to at least one applica- 

15 tion functi nn, 

' inventively, the identifier string is checked in the postage 
meter machine downwardly proceeding from the highest 
security level and opens (allows access to) all memory areas 
in the non-volatile memory of the postage meter machine 

20 specifically required in an application. A recognized gap 
(absence of an entry) in the identifier string generates an 
error message and results in a blocking of the appertaining 
memory area in the non-volatile memory of the postage 
meter machine and/or the chip card. 

25 The chip card write/read unit 70 is composed of a 
mechanical carrier for the microprocessor card and a con- 
tacting arrangement 74, The latter allows a reliable mechani- 
cal holding of the chip card in the read position and 
unambiguous signaling of when the read position of the chip 

30 card in the contacting arrangement 74 is reached, for 
example a tactile signal by a pressure point according to the 
push/push principle, an eject key or a display beeper mes- 
sage of the postage meter machine. A reliable electrical 
contacting of chip cards with contacts according to ISO 

35 7816 for at least 100,000 contacting cycles, as well as easy 
utilization when plugging and pulling the chip card are thus 
achieved. The microprocessor card with the microprocessor 
75 has a programmed-in read capability for aU types of 
memory cards, as well as for chip cards with and without 

40 PIN coding. An encryption or deciphering for security 
algorithms (for example, RSA, DBS) is not required. The 
interface to the postage meter machine is a serial interface 
according to RS232 standard. The data transmission rate 
amounts to a minimum of 1.2 Baud. A self-test function with 

45 ready message can be manually implemented or can be 
automatically implemented after turning on the power sup- 
ply with switch 71. The master card 50 inserted into the 
plug-in slot 72 grants at least an access authorization to the 
overall cost center, i.e. all issued master chip cards access 

50 only this cost center. After this, there is the possibility of 
selecting another cost center by keyboard. Among other 
things, master chip cards are provided for the inventive 
definition of the chip card/cost center relationship and for 
enabling/inhibiting cards. For expanding the function scope, 

55 an access possibility to defined cost centers via the successor 
cards can be created with the postage meter machine, 
whereby a storage of the allocation being possible according 
to an arbitrary hierarchy. 
Hie chip cards of type a are suitable for all access/cost 

60 center handling function applications. Each postage meter 
machine with chip card reader is delivered with at least one 
master card. Second and further supplied cards are referred 
to as successor cards. When delivered, each of these cards 
has a chip card number that is not yet valid, or that is 

65 incomplete. After their initialization internally in the postage 
meter machine, however, they have a running chip card 
number that is an unambiguous identifier for each chip card. 
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The chip cards are not yet allocated to specific postage meter 
machines only in their delivered condition. The new postage 
meter machine to be placed in operation should preferably 
automatically validate the first plugged chip card as the 
master card and deposit a corresponding chip card number 
in its memories. The allocation of the fiinctionality of every 
existing or subsequently supplied card ensues internally in 
the postage meter machine via a table. The functionality of 
the master card is defined as follows: 

a) The cost center KST 1 is selected as a p re-setting; this 
pre-set value can be modified. 

b) It is manually possible to establish, delete and select 
cost centers KST. 

c) It is possible to allocate successor cards to specific cost 
centers KST, to modify or delete allocations. 

d) All available KST linkage conditions are definable or, 
respectively, the table is to be filled with input data 
according to a linkage. 

e) Access to the full functionality of the postage meter 
machine. 
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proceeding from a cost center menu sub-point provided 
therefor by allocating — after insertion of the master card and 
selection of the authorization function — an arbitrary succes- 
sor card to an existing or newly defined cost center or group. 

^ To this end, the corresponding successor card is plugged and 
is written with an identifier A by the postage meter machine. 
When the chip card is used, both identifiers (A and B) are 
loaded from the chip card into the postage meter machine 

20 and are compared to one another therein after a computa- 
tional operation. Given, for example, equality, the interpre- 
tation of the blanked-out, last three places of the identifier A 
ensues via a table with respect, among other things, to which 
const center number this card is allocated. The first entry in 

15 die table ensues for the master card. The postage meter 
machine is blocked without an inserted master card exhib- 
iting said authorization function. For example, the following 
table is present in the postage meter machine for the first 
branch according to FIG. lb: 





KST 


'nmci 


Advertizing 




Actual 


Card No. 


No. 


value 


slogan 


Vsilue limit 


remaining value 


1234567801 


1-50 


20 sec 


no 


R3.X - 5000.- 


R1.X -99.- 


1234567802 


1-4 


10 sec 


1 


R3.y = 2000.- 


Rl.y = 255.- 


1234567803 


1 


2 sec 


1 


R3.1 - 1000.- 


Rl.l -99.- 


1234567804 


3 


2 sec 


no 


R3,3 - 1000." 


R1.3 =10.- 


1234567805 


4 


2 sec 


5 


R3.4 - 3000." 


R1.4 - 2005." 


1234567806 


2 


1 sec 


no 


R3.2 " 0." 


Rl.2-0.- 



The functionahty of the successor card is defined as follows: 

a) Automatic selection of a defined cost center KST or 
KST group with the linkage conditions thereof 
(advertizing slogan No., potentially with value limita- 
tion per time unit, etc.). 

b) Set, modify or delete cost center/advertising slogan 
allocations. Free selection of aU slogans present in the 40 
postage meter machine. 

c) "Duplicate successor cards" function. 

The security with respect to protection against card copy- 
ing is assured by manufacturer-specific and user-specific 
information in a write-protected area of the card. 45 

At the manufacturer side, the chip cards are provided with 
a manufacturer-specific identifier B in the write-protected 
part II of the identifier string. Additionally, the identifier A 
is stored write-protected on the part of the postage meter 
machine upon initial authorization, this identifier A being 50 
composed of the serial number of the postage meter 
machine, for example 505010, and an appended, for 
example three-place consecutive number, for example 001 . 
The personalization already arises from the serial number of 
the postage meter machine and the appended, three -place 55 
number, for example 505010 001 . This personalization can 
ensue at the manufacturer for the master card. 

In a preferred embodiment of the invention, the final 
personalization of the master card itself ensues at the user by 
the three-place number 001 being appended with the postage 60 
meter machine. Although a distinction is made between 
master card and successor cards, the difference is only that 
the master card is the first card authorized by the postage 
meter machine and is automatically given the number 001. 
Otherwise, the stmcture of the card content is identical. 65 

The postage meter machine JetMail® is able to automati- 
cally authorize chip cards for use at the machine. This occurs 



The customer has the possibility of labeling the type a 
chip card with the current cost center number. Modifications 
of allocations between chip cards and cost center numbers 
are only possible via the master card. Certain menu points in 
the cost center menu are thus only enabled with inserted 
master card. Further, certain linkage conditions for the cost 
centers are analogously variable, for example with respect to 
advertizing slogan No., value limit per time unit. The 
postage meter machine reacts to inequality or ULnknown, 
invalid cards with a corresponding error message. As a result 
of the "duplicate successor cards" function, the postage 
meter machine JctMail® continues to be able — ^with the 
assistance of the master card — to independently authorize 
successor cards for use at it. To that end, the corresponding 
successor card is inserted and written with the identifier A by 
the postage meter machine. A value limit for the usage of 
franking values per calendar month whose validity is limited 
in time (monthly) but renewable can be defined for each cost 
center KST with the assistance of the master card. The entire 
credit present in the postage meter machine JetMail® is 
maximally available for every cost center KST. At the 
beginning of a new calendar month, the predetermined value 
limit is transferred; there are no carry-overs. Changes of 
allocations between chip cards and cost centers as well as the 
potentially correlating value limitations are possible only 
with the assistance of the master card. The xiser interface of 
the postage meter machine is completely present at all times 
but, given selection of the points reserved for the master card 
when the master card is not inserted, this is required as 
authorization. The displayable table for the administration of 
the chip card functionality can, for example, contain the 
fields: chip card No ./KST No ./timer value/advertizing slo- 
gan alio cation/value limit/current remaining value. For what 
are referred to as group cards, it is fimdamentally possible 
that groups of cost centers x, y are allocated to a card 
number. 
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The co ntrol device 90 of the pos tage meter macb ipc 
conn ectcg' to the Chip card w rtte/rcad unit 7U has a~ho n- 
v olalile memory 9S^th inventive memory areas A, B an d 
CTfor an allocation ot listed application runciions lo a chip 
card. (As described below, the clock/data module 95 also 
performs the function of a further non-volatile memory.) 
This display of the allocation can ensue according to the 
aforementioned table or in a similar form. In accordance 
with the invention, the control device 90, dependent on a 
predetermined input, allows a setting of the postage meter 
machine for at least one function application program from 
a number of further function application programs by the 
insertion of at least one chip card from a set of chip cards 50, 
51, 52, 53, that is inserted into the plug-in slot 72 of the chip 
card write/read unit 70. Each chip card 50, 51, 52, 53 for a 
predetermined mput merely contains a chip card number. 
The microprocessor 91 of the control device 90 is pro- 
grammed 

a) to load the chip card number stored in the respective 
chip card 50, 51, 52, 53; 

b) to call an allocation of the listed application functions 
to the respective chip card number in one of the 
memory areas A, B of the non-volatile memory 94, of 
the postage meter machine and to implement the cor- 
responding application programs stored in the program 
memory 92; the allocation can be stored in the memory 
ar eas A, B arbitrarily selectable by the authorized user. 

"I^IG. stows a division ot the structure onto memory 
areas A, B and C, whereby a list of valid card numbers is 
no n- volatile ly stored in the first memory area A, linkage 
conditions are non-volatilely stored in the second memory 
area B and appertaining parameter sets are non-volatile 
stored in the third memory area C. This structure can be 
separately modified in each of the aforementioned memory 
areas A and B. For example, a further card number is newly 
added to the listing in the Ust of valid card numbers CC-No. 
Each card number has an address pointer AP allocated to it 
that points to an address in the second memory area B under 
which the card number-dependent linkage conditions are 
stored together with appertaining condition pointers BP and 
value pointers WP. The value Pointers WP point to an 
address for the appertaining parameter set in the third 
memory area C. A linkage is freely selectable via the 
condition pointers BP that point to an address for a further 
condition with the appertaining value pointer. The value 
pointer WP then points to an address with the appertaining 
parameter set in the third memory area C. 

The divided (distributed), modifiable structure can be 
restored via the pointers, whereby an intermediate storage of 
the loaded pointers ensues in memory areas E, F of the main 
memory RAM 93, and a corresponding data entry into a 
memory area D of the main memory RAM 92, are under- 
taken for storing a dataset. For this purpose the micropro- 
cessor 91 of the postage meter machine executes a corre- 
sponding function or a stored sequence of functions 
according to the application program and the entered param- 
eters. One of the functions can be implemented for the 
initialization of successor cards in order to be able to modify 
these, or in order to at least partially display the structure in 
a table. 

It is assumed according to FIG. 4 that a part III of the 
identifier string is interpreted and that a determination is 
then made in step 125 that the function application is Usted, 
i.e. the card number is found in the memory area A. A timer 
value is now loaded into a further memory area of a 
no n- volatile memory, preferably a memory area of the 
clock/date module 95. The step 127 is then reached. 



8,422 Bl 

16 

FIG. Sb shows a detail of the flowchart of FIG. 4 in order 
to illustrate the control by the microprocessor 91 when 
calhng at least one of the hinctions according to the stored 
structure by inputting a chip card number. Before the func- 

5 tionality is enabled for a successor card, that address pointer 
AP that is allocated in memory area A to the chip card 
number is loaded into a memory area E of the main memory 
RAM 93 in a sub-step 127-01. In the sub-step 127-01, 
moreover, condition points BP are loaded step-by-step into 
a memory area F of the main memory RAM 93 for every 

^ pass through a loop S. The memory areas E and F of the 
main memory RAM 93 serve for the intermediate storage of 
the data of the pointers AP and BP for the following data 
processing. After the loading and intermediate storage of the 
data of the pointers AP and BP, a value pointer WP stored in 

15 the second memory area B is found, this being allocated to 
the condition pointer BP. At the same time, a following 
condition pointer BP that the microprocessor 91 is accessed 
so as to find further, appertaining value pointers WP is taken 
from the data of the condition pointer BP. The further data 

20 processing in the sub-step 127-02 is preferably nested, i.e. 
lime-optimally organized. Thus, the technique know as 
"pipelining'* can be implemented when the value pointers 
WP point to the parameter sets in the third memory area C 
and corresponding parameter sets are loaded firom the third 

25 memory area C for storage in the RAM area D of the main 
memory RAM 93. A check is carried out in the following 
sub-step 127-03 to determine whether a last condition 
pointer BP had been processed in the aforementioned pro- 
cessing of the routine. When this is not the case, a branch is 
made back to the sub-step pl27-01 in order to again sequen- 
tially process the loop S until the processing of a last 
condition pointer BP has been determined in the sub-step 
127-03. In the following sub-step 127-04, the applications of 
the inserted card are enabled according to the dataset in the 
memory area D individually compiled during the processing 

35 of said loop S. The microprocessor 91 thereby has recourse 
to function applications stored in the program memory 92 
and to the parameters that are present in said intermediately 
stored dataset. At the same time, an individual menu corre- 
sponding to the individual dataset can be displayed in the 

40 display unit 89. 

A function application stored in the program memory 92 
provides a keyboard input so that the microprocessor 91 can 
complete the processing of the application program. The 
microprocessor 91 is programmed to access three memory 

45 areas A, B, C of the non-volatile memory 94 of the control 
device 90 in order to call an allocation of the listed appU- 
cation functions to the respective chip card number in the 
non-volatile memory 94 of the postage meter machine and 
to implement the corresponding application programs. The 

50 allocation represents a predetermined structure, whereby the 
modifiable structure divided onto the three memory areas A, 
B, C of the non-volatile memory 94 can be restored with 
pointers. The allocation of the listed application functions to 
the respective chip card number in one of the memory areas 

55 A, B of the non-volatile memory 94 of the postage meter 
machine that is called by the microprocessor 91 in order to 
unplement the corresponding application programs stored in 
the program memory 92 can be arbitrarily modified with an 
inserted master card, because the allocation can be stored 

60 arbitrarily selectable in the memory areas A, B by the 
authorized user according to at least one corresponding 
input, for example by keyboard 88. 

The structure stored non-volatilely in the non-volatile 
memory 94 of the postajge meter machine is a hierarchic 

65 stmcture established by the sequence of the listing of the 
chip card numbers and by the allocation of listed application 
functions. 
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The microprocessor 91 of the control device 90 is pro- 
grammed to load the chip card number of the inserted chip 
card, that is stored in a segment provided therefor in an 
identifier string stored in the protected memory areas of the 
respective chip cards 50, 51, 52, 53, and to correspondingly 
implement a function input after the insertion of the chip 
card. A function input is thereby provided in order to call at 
least one application function. For example, a function input 
is provided in order to simplify the administration of cost 
center data to be managed by accessing the appertaining 
function application program. 

The programmability of the applications that are allocated 
to a chip card number explained with reference to the 
example of step 127 applies to first chip cards (master cards) 
in step 121 as well as to second and further successor cards. 
For master cards 50, a branch when processing a corre- 
sponding step 121-04 can be made to a screen image for a 
menu prompt, "generate an application card" (step 121-1, 
not shown). A function input can ensue in combination with 
an additional keyboard input in order to select the desired 
application from the number of possible applications. 

Although modifications and changes may be suggested by 
those skilled in the art, it is the intention of the inventors to 
embody within the patent warranted hereon all changes and 
modifications as reasonably and properly come within the 
scope of their contribution to the art. 

We claim as our invention: 

1. A postage meter machine comprising: 

a printer for printing an imprint on a print -receiving 
medium; 

a control system connected to said printer for controlling 
a printing procedure resulting in printing of said 
imprint by said printer, said control system including a 
microprocessor, a non-volatile memory, having a plu- 
rality of non-volatile memory areas, connected to said 
microprocessor, and a user interface connected to said 
microprocessor; 

a chip card write/read unit connected to said micropro- 
cessor; 

a plurality of chip cards individually insertable into said 
chip card write/read unit, each of said chip cards having 
a chip card number; 

said user interface allowing a user to store a plurality of 
limited application functions, associated with said 
printing procedure, in said non-volatile memory areas 
in a list wherein said plurality of limited application 
functions are respectively allocated to the chip card 
numbers of said chip cards, the respective allocation of 
said chip card numbers and said plurality of limited 
application functions in said do n -volatile memory areas 
being arbitrarily selectable by said user via said user 
interface; 

a program memory, accessible by said microprocessor, 
containing a plurality of programs respectively allo- 
cated to said plurality of limited appUcation functions; 
and 

said microprocessor, upon insertion of one of said chip 
cards in said chip card write/read unit as an inserted 
chip card, loading only the chip card number of said 
inserted chip card and calling the limited application 
function allocated thereto in said non- volatile memory 
areas, as a called limited application function, and 
executing the program allocated to said called limited 
application function in said program memory. 

2. A postage meter machine as claimed in claim 1 wherein 
said memory areas of said non -volatile memory comprise 
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memory areas respectively dedicated to different purposes 
within a predetermined structure, said microprocessor com- 
prising an electronic pointer for accessing said areas of said 
non-volatile memory in a sequence set by said predeter- 

5 mined structure, wherein one of said areas of said non- 
volatile memory comprises a parameter data memory area 
wherein parameter data arc stored, wherein said postage 
meter machine further comprises a main random access 
memory, and wherein said microprocessor, for executing at 

10 least one of said programs stored in said program memory, 
operates said electronic pointer to access the parameter data 
stored in said parameter data memory area of said non- 
volatile memory for temporarily transferring said parameter 
data into said main random access memory. 

15 3. Apostage meter machine as claimed in claim 2 wherein 
said predetermined structure comprises a hieriarchally orga- 
nized structure established by the allocation of the limited 
application functions in said list. 

4. Apostage meter machine as claimed in claim 2 wherein 
20 said predetermined structure comprises a hierarchically 

organized stmcture established by a sequence of the chip 
card numbers and the respectively allocated limited appli- 
cation functions in said list. 

5. Apostage meter machine as claimed in claim 1 further 
25 comprising a housing containing said printer and said con- 
trol system and said chip card write/read unit, said housing 
having a guide plate for guiding said print-receiving medium 
past said printer, said housing having an upper housing edge 
and said chip card write/read unit having a plug-in slot for 

30 receiving said chip cards disposed behind said guide plate 
and accessible from said upper housing edge. 

6. Apostage meter machine as claimed in claim 1 wherein 
each of said chip cards has a protected memory area with an 
identifier string stored therein, said identifier string in each 

35 chip card having a segment in which the chip card number 
for that chip card is stored, and wherein said microprocessor 
loads the chip card number of said inserted chip card and 
immediately executes the program allocated to the called 
limited application function after insertion of said inserted 

40 chip card. 

7. Apostage meter machine as claimed in claim 6 wherein 
said user interface allows an additional user input and 
wherein said microprocessor executes the program allocated 
to said called limited application function in combination 

45 with said additional user input. 

8. Apostage meter machine as claimed in claim 7 wherein 
said user interface allows entry of a user input, as said 
additional user input, for associating said printing procedure 
with a selected cost center number. 

50 9. A method for operating a postage meter machine 
comprising the steps of: 

printing an imprint on a print-receiving medium; 

controlling a printing procedure resulting in printing of 
said imprint using a control system including a 
microprocessor, a non-volatile memory, having a plu- 
rality of non-volatile memory areas, connected to said 
microprocessor, and a user interface connected to said 
microprocessor; 

connecting a chip card write/read unit to said micropro- 
cessor; 

providing a plurality of chip cards individually insertable 
into said chip card write/read unit, each of said chip 
cards having a chip card number; 
65 storing, via said user interface, a plurality of limited 
application functions, associated with said printing 
procedure, in said non -volatile memory areas to pro- 
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duce a list wherein said plurality of limited functions 11. A method as claimed in daim 10 comprising produc- 

arc respectively allocated to the chip card numbers of ing said predetermined structure as a hieriarchally organized 

said chip cards, the respective allocation of said chip structure established by the allocation of the applications 

card numbers and said plurality of limited applications function in said list. 

function in said non-volatile memory areas being arbi- 5 12. A postage meter machine as claimed in claim 10 

trarily selectable by said user via said user interface; comprising producing said predetermined structure as a 

, hierarchically organized structure established by a sequence 

providing a program memory, accessible by said numbers and the respectively allocated 

microprocessor, contaming a plurality of programs application functions in said list. 

respectively allocated to said plurality of limited appli- ^3. A method as claimed in claim 9 further comprising 

cations function; and containing a printer for conducting said printing and said 

operating said postage meter machine by inserting one of control system and said chip card write/read unit, in a 

said chip cards in said chip card write/read unit as an housing having a guide plate, guiding said print-receiving 

inserted chip card, with said microprocessor thereupon medium past said printer during printing of said imprint, 

loading only the chip card number of said inserted chip providing said chip card write/read unit with a plug-in slot 

card and calling the limited application function alio- for receiving said chip cards, disposing said plug-in slot 

catcd thereto in said non-volatile memory areas, as a behind said guide plate and accessing said plug- in slot from 

called limited application function, and executing the an upper edge of said housing. 

program allocated to said called limited application 14. A method as claimed in claim 9 comprising providing 

function in said program memory. each of said chip cards with a protected memory area and 
10. A method as claimed in claim 9 wherein said memory ^ storing an identifier string therein, providing a segment in 

areas of said non-volatile memory comprise memory areas each identifier string in each chip card and storing the chip 

respectively dedicated to different purposes within a predc- card number for that chip card in said segment, and wherein 

termined structure, and comprising the additional steps of said microprocessor loading the chip card number of said 

providing an electronic pointer in said microprocessor inserted chip card and immediately executing the program 
accessing said areas of said non-volatile memory using said ^ allocated to the called limited application function after 

electronic pointer in a sequence set by said predetermined insertion of said inserted chip card, 

structure, wherein one of said areas of said non -volatile 15. A method as claimed in claim 14 comprising entering 

memory comprises a parameter data memory area wherein an additional user input via said user interface and said 

parameter data arc stored, connecting a main random access microprocessor executing the program allocated to said 

memory to said microprocessor, and said microprocessor, called limited application function in combination with said 

for executing at least one of said programs stored in said additional user input. 

program memory, operating said electronic pointer to access 16. A method as claimed in claim 15 comprising entering 

the parameter data stored in said parameter data memory as said additional user input, an entry for associating said 

area of said non-volatile memory for temporarily transfer- printing procedure with a selected cost center number, 
ring said parameter data into said main random access 

memory. * ♦ * * ♦ 
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